Brazilian security researchers purchased counterfeit Ledger devices on Chinese e-commerce platforms, reminding users to only buy devices from official sources.

Techub News reports, according to Cointelegraph, Brazilian security researcher "Past_Computer2901" posted on the Reddit "ledgerwallet" channel, stating that he purchased a Ledger Nano S Plus for personal use from a Chinese e-commerce platform at the same price as on Ledger's official store. When he connected the device to the genuine Ledger Live application, it failed Ledger's built-in "Genuine Check." Subsequently, he disassembled the device and discovered modified hardware and firmware designed to capture and leak sensitive wallet data. Furthermore, upon startup, the device displayed the name of another manufacturer, Espressif Systems. The researcher warns users to only download Ledger Live from official sources and purchase hardware from official channels.